Principal Identity & Security Architect (Hybrid)

FyrFly Venture Partners; Pleasanton (CA); Hybrid; USD 190,000 - 257,000; Full time

Benefits offered by this job

401k

Medical

Dental

Vision

12 paid holidays

Sick pay accrual

Parental leave

Life insurance

Disability insurance

FSA & Wellness

Flexible time off

Job summary

Blackhawk Network seeks a Principal Security Engineer to shape security and identity strategy across its global tech stack, leading IAM programs and architecture. You will drive zero-trust adoption, implement PAM and IGA, and guide engineers while aligning with PCI, SOC2, and NYDFS requirements.

The role emphasizes collaboration with security, IT, and compliance teams to mature the organization’s security posture and enable secure access across cloud and on‑prem environments.

Qualifications

• Extensive experience in IAM, RBAC, IGA, PAM, and access certification.
• Deep understanding of SAML, OAuth, OIDC, SCIM, LDAP, Kerberos.
• Experience implementing IAM across multi-domain environments.

Responsibilities

• Lead security and identity strategy across networks, endpoints, and cloud infra.
• Own IAM programs, governing lifecycle, PAM, and access requests.
• Design and implement unified identity governance across AD domains and Okta.
• Drive remote access strategy with SASE and SSL/TLS inspection.
• Partner with Compliance and IT to meet PCI DSS, SOC2, NYDFS objectives.
• Mentor engineering teams and promote security best practices.

Skills

IAM strategy

Identity governance

RBAC

PAM

Zero trust

SAML/OAuth/OIDC

Prisma Access

Okta

Azure AD

Security architecture

Education

Bachelor’s degree

Tools

Active Directory

Azure AD

Okta

Prisma Access

ServiceNow

LDAP

SAML/OIDC

Kerberos

Job description

Blackhawk Network seeks a Principal Security Engineer to shape security and identity strategy across its global tech stack, leading IAM programs and architecture. You will drive zero-trust adoption, implement PAM and IGA, and guide engineers while aligning with PCI, SOC2, and NYDFS requirements.

The role emphasizes collaboration with security, IT, and compliance teams to mature the organization’s security posture and enable secure access across cloud and on‑prem environments.